CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a7d4b41df1c1a4d920872ca8bc7ec726_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a7d4b41df1c1a4d920872ca8bc7ec726_JaffaCakes118
Size
94KB
MD5
a7d4b41df1c1a4d920872ca8bc7ec726
SHA1
32c4d4be1667f0f975e4eed4e2ba2cdf2dd12080
SHA256
6968b02197b575b62e558cd8bff706879748262354507474d331ef9c0a63ebcf
SHA512
14d6fa9e269bb78e795f6fc1e933a39bd101d836aa3c5a4fac10e3254bb854a8cd4b3a3a73b156d6a55a111cdd1eaa3b9d7ef6b7a94fb086804c5841c095faa4
SSDEEP
1536:LmSQNbJE1vj8gDxkOXlWaq+h38CxKHWi1laXMB+YyGZQ84sZigr5m:LmFty1L8gDyOXl5T3Vql14XxY1ZQfsZ+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7d4b41df1c1a4d920872ca8bc7ec726_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE